Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/7BecVtktn_zFL6NeJSY17Mm3Wn8.roa
File: 7BecVtktn_zFL6NeJSY17Mm3Wn8.roa (raw, json)
Hash identifier: Xl9ovdPvz/eUcF9Cq6X3dAy1Kp3sd1YVRBZANroEamI=
Subject key identifier: EC:17:9C:56:D9:2D:9F:FC:C5:2F:A3:5E:25:26:35:EC:C9:B7:5A:7F
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A023ACE4C81F5B8A34CCAAC465581CC1FF
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/7BecVtktn_zFL6NeJSY17Mm3Wn8.roa
Signing time: Fri 21 Aug 2026 09:35:28 +0000
ROA not before: Fri 21 Aug 2026 09:35:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402857
IP address blocks: 87.82.199.0/24 maxlen: 24
87.84.70.0/24 maxlen: 24
212.134.137.0/24 maxlen: 24
212.134.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:ac:e4:c8:1f:5b:8a:34:cc:aa:c4:65:58:1c:c1:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 21 09:35:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec179c56d92d9ffcc52fa35e252635ecc9b75a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fe:a5:97:7e:ca:4b:01:d4:e6:08:76:49:d0:
b4:85:87:bf:89:41:ce:d9:36:0a:9b:71:8d:d0:b5:
9f:de:87:bf:b8:0d:40:2d:7f:97:e3:5f:d7:37:e8:
c9:ae:23:44:3d:02:8a:6f:36:c0:9c:fa:47:a0:fd:
83:8a:e1:c4:4f:f5:06:cc:10:ae:fe:ab:5b:4b:52:
ab:fa:2c:f0:dc:9f:ea:cf:c2:19:24:da:db:32:1b:
b8:9e:49:84:cb:97:c4:39:d0:1f:a9:d0:a5:3d:b8:
ef:7f:6e:bb:3d:c7:16:12:40:15:ac:5f:5c:f4:d0:
de:ed:b2:40:71:9b:41:ee:7a:bd:6b:8f:e1:a9:22:
c9:1f:6c:59:b2:7e:0b:af:90:ea:05:39:86:6e:16:
e0:68:0b:a0:c8:9d:2f:26:1a:81:38:68:f3:4c:bd:
c1:30:5b:ad:2d:69:88:1b:12:8a:3e:5a:9e:2a:b6:
68:0a:a8:2d:06:54:8b:5d:67:04:d6:82:56:b0:fa:
f3:01:28:41:29:32:f6:a4:34:0f:6a:83:10:05:64:
41:02:44:67:17:aa:6f:b4:42:2f:15:78:3d:0e:d2:
b1:ef:ed:3e:ab:7d:11:73:5d:61:a2:e8:ba:70:02:
d8:eb:46:e8:3a:ac:b5:f0:fe:91:25:90:47:8a:b4:
c1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:17:9C:56:D9:2D:9F:FC:C5:2F:A3:5E:25:26:35:EC:C9:B7:5A:7F
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/7BecVtktn_zFL6NeJSY17Mm3Wn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.82.199.0/24
87.84.70.0/24
212.134.137.0/24
212.134.201.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:fc:85:07:3e:24:6a:9e:3e:4f:d5:ab:8b:20:2d:ed:ac:30:
1f:08:1b:13:ba:8e:fa:67:5d:4c:f9:5b:aa:9d:87:bb:98:92:
db:ce:4f:c4:2c:d1:12:1e:ee:45:9e:a6:3a:04:23:72:15:62:
56:48:40:ee:27:a2:8c:cc:b1:e6:f9:cb:da:fc:19:b4:57:31:
4d:26:bc:af:5c:fd:2e:de:8a:bc:da:45:a9:31:bd:18:2e:60:
ec:aa:16:63:eb:f0:52:20:c1:b6:cb:5e:67:53:a9:bf:87:be:
53:c9:5c:2c:df:29:96:d3:b0:c2:91:e3:45:56:17:a0:ae:f2:
fb:6e:62:a2:ba:7a:d6:69:6d:a0:84:9d:66:3f:61:92:5c:e5:
bf:b1:54:7b:2a:c7:fc:58:26:c8:3f:44:be:d5:53:a1:b9:ce:
04:c7:7d:77:31:65:37:2c:d6:59:44:2e:a7:43:3e:17:d1:74:
a6:bf:62:f0:43:93:70:19:f4:36:76:e9:21:b3:66:9c:c5:78:
a7:f3:5e:32:bf:7d:d6:59:0a:23:fb:3c:2c:92:4a:a3:98:20:
c0:65:5a:e7:0a:a4:3b:0e:90:ef:3c:91:0b:26:ff:93:a2:e7:
b5:d6:05:03:bb:99:8a:1a:1e:7a:04:e8:d4:86:85:e6:14:3e:
86:b3:9a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:03 2026 by rpki-client